SmartFinn/eve-ng-integration

Sorry but Not working on Manjaro...hope you can help me out!

dlj2019 opened this issue · 32 comments

Hi,

I already install eve-ng-integration v4.1 and now v5.0 released 2 day ago but no success :(
During installation i did not face any issues during the script.

Operating System: Manjaro Linux
Kernel: Linux 4.9.68-1-MANJARO
Architecture: x86-64

When i click on host to open the console, nothing comes up :(

I hope you can help me out .

Thanks in advance.
DJ

What actually didn't work? Telnet? Try to run the command and let me know what you got:

xdg-open 'telnet://route-server.he.net'

No, you should execute the following commands line by line in your terminal:

mkdir -p ~/.local/share/applications/
xdg-mime default eve-ng-integration.desktop x-scheme-handler/capture
xdg-mime default eve-ng-integration.desktop x-scheme-handler/telnet
xdg-mime default eve-ng-integration.desktop x-scheme-handler/docker
xdg-mime default eni-rdp-wrapper.desktop application/x-rdp

What this command returns:

xdg-mime query default x-scheme-handler/telnet

and what happens when running:

xdg-open 'telnet://route-server.he.net'

Could you run those commands and paste the screenshot here?

No screenshot here ;)

No, try to drop into GitHub comment field instead of email.

You can use any terminal emulator, including Tilix, see this #6 (comment)

SecureCRT isn't a terminal emulator, but you can use it as telnet command replacement, see #19 (comment)

Also, any ideia how i can get Wireshark to work properly ?

This is the error i am getting it.

ss1

But i can open only one console window, if i try to open a second terminal window it will close the first one.

Try this eve-ng-integration.destop file:

[Desktop Entry]
Name=EVE-NG Integration
Exec=env OVERRIDE_TERMINAL_CMD="tilix -e" eve-ng-integration %u
TryExec=eve-ng-integration
Type=Application
Categories=Network;
MimeType=x-scheme-handler/telnet;x-scheme-handler/capture;x-scheme-handler/docker;
X-KDE-Protocols=telnet,capture,docker
NoDisplay=true

Just testing it works as exepted with Tilix.

Also, any ideia how i can get Wireshark to work properly ?
This is the error i am getting it.

That not an error. That is ssh-askpass ask you to enter the root password for EVE-NG machine.

Here is what happens when i press ok...

deepinscreenshot_select-area_20171223114614

1 - Tilix opens but not " Tab" windows

Tilix doesn't support opening new tab via command line.

Need to fix Wireshark :)
Here is what happens when i press ok...

See Error End of file on pipe magic during open when starting Wireshark

In brief, the problem with ssh authentification. You could setup SSH key-based authentification with EVE-NG VM to avoid the problem.

I see but Wireshark not getting data through ssh, so it's problem with authentification.

Do you know how i can fix this authentication issue. I installed "openssh-askpass" but the issue still there...

deepinscreenshot_select-area_20171223120126

As I wrote, try to set SSH key-based authentification.

Generate new key if you didn't have it:

ssh-keygen -t rsa

and then upload it to EVE-NG:

ssh-copy-id root@EVE_NG_IP

New RSA was genarated and successfully uploaded to the EVE-NG Server but i still have the same issue:

" /usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys

Number of key(s) added: 1

Now try logging into the machine, with: "ssh 'root@ x.x.x.x'"
and check to make sure that only the key(s) you wanted were added. "

I can't help you with the problem. Try to debug the case with this command:

ssh root@x.x.x.x tcpdump -i pnet0 -n -s 0 -U -w - | wireshark -k -i -

You didn't replace x.x.x.x with your EVE-NG ip.

sign_and_send_pubkey: signing failed: agent refused operation

You have a problem with ssh-agent. Reboot your host and try again.

root@x.x.x.x's password: qt5ct: D-Bus global menu: no

Still, ask the password...

i reboot the laptop and the server and tried again...

[dee@dee-dlj ~]$ ssh root@x.x.x.x tcpdump -i pnet0 -n -s 0 -U -w - | wireshark -k -i -
qt5ct: using qt5ct plugin
qt5ct: D-Bus global menu: no
tcpdump: listening on pnet0, link-type EN10MB (Ethernet), capture size 262144 bytes

You are the Best !!! Thank you so much for all your help... i really appreciate it .